Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-17382 — CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit | Kitploit
Tools/GitHubGitHub/typeconfused/cve-2020-17382
Privilege EscalationVulnerability AnalysisExploitationBinary Exploitation
GitHubtypeconfused/cve-2020-17382

CVE-2020-17382

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit

View Repository
113 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-17382 Windows 10 x64 2004 Build 19041.264 Exploit

Kudos to @matteomalvica for asking me so many questions about this vulnerability that forced me to write an exploit for him for the latest Windows 10 release 19041.264 without KVA Shadow (i.e. non Specter vulnerable CPUs) and without VBS. Trivial to adapt to older Windows versions (Matteo adapted it to 1709, check his blog post).

On CPUs vulnerable to CVE-2018-3620 it becomes tricky because your ROP chain will grow considerably to make the PML4 executable, and you will end up overwriting stack cookies of the ntoskrnl function where you "want" to return.

Credits and original advisory here https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities

Download Tool